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THAT WHICH IS CLAIMED IS: 

1. A cryptographic device comprising: 

a cryptographic module and a communications module 
coupled thereto; 

said cryptographic module comprising a user 
network interface, a host network processor coupled to said 
user network interface, and a cryptographic processor 
coupled to said host network processor; 

said communications module comprising a network 
communications interface coupled to said cryptographic 
processor; 

said host processor generating cryptographic 
processor command packets for said cryptographic processor 
each comprising an address portion and a data portion, and 
encapsulating command packets for said communications module 
in the data portions of said cryptographic processor command 
packets; 

said cryptographic processor passing the 
communications module command packets to said communications 
module without performing cryptographic processing thereon. 

2. The cryptographic device of Claim 1 wherein 
said host network processor formats the data portions based 
upon the simple network management protocol (SNMP) . 

3. The cryptographic device of Claim 1 wherein 
the communications module command packets comprise Ethernet 
packets . 
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4. The cryptographic device of Claim 1 wherein 
the cryptographic processor command packets comprise 
Internet protocol (IP) packets. 

5. The cryptographic device of Claim 1 wherein 
said cryptographic module further comprises: 

a first housing carrying said user network 
interface, said host network processor, and said 
cryptographic processor; and 

a first connector carried by said first housing 
and coupled to said cryptographic processor. 

6. The cryptographic device of Claim 5 wherein 
said communications module further comprises: 

a second housing carrying said network 
communications interface; and 

a second connector carried by said second housing 
and being removably mateable with said first connector of 
said cryptographic module. 

7. The cryptographic device of Claim 1 wherein 
said cryptographic processor comprises: 

an unencrypted data buffer circuit coupled to said 
host network processor; 

a cryptography circuit coupled to said unencrypted 
data buffer circuit; and 

an encrypted data buffer circuit coupled to said 
cryptography circuit. 



8. The cryptographic device of Claim 1 wherein 
said communications module comprises a predetermined one 
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from among a plurality of interchangeable communications 
modules each for communicating over a different 
communications media. 

9. The cryptographic device of Claim 1 wherein 
said network communications interface comprises at least one 
of a wireless LAN (WLAN) communication circuit, a wireline 
communication circuit, and a fiber optic communication 
circuit. 

10. The cryptographic device of Claim 1 wherein 
said user network interface comprises an Ethernet Local Area 
Network (LAN) interface, and wherein said network 
communications interface comprises a network LAN interface. 

11. The cryptographic device of Claim 1 wherein 
said cryptographic module further comprises a tamper circuit 
for disabling said cryptographic processor based upon 
tampering with said first housing. 

12. A cryptographic device comprising: 

a cryptographic module and a communications module 
coupled thereto; 

said cryptographic module comprising a user Local 
Area Network (LAN) interface, a host network processor 
coupled to said user LAN interface, and a cryptographic 
processor coupled to said host network processor; 

said communications module comprising a network 
LAN interface coupled to said cryptographic processor; 

said host processor generating cryptographic 
processor command packets for said cryptographic processor 
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each comprising an address portion and a data portion, and 
encapsulating Ethernet command packets for said 
communications module in the data portions of said 
cryptographic processor command packets, said host network 
processor formatting the data portions based upon the simple 
network management protocol (SNMP) ; 

said cryptographic processor passing the 
communications module command packets to said communications 
module without performing cryptographic processing thereon. 

13. The cryptographic device of Claim 12 wherein 
the cryptographic processor command packets comprise 
Internet protocol (IP) packets. 

14. The cryptographic device of Claim 12 wherein 
said cryptographic module further comprises: 

a first housing carrying said user LAN interface, 
said host network processor, and said cryptographic 
processor; and 

a first connector carried by said first housing 
and coupled to said cryptographic processor. 

15. The cryptographic device of Claim 14 wherein 
said communications module further comprises: 

a second housing carrying said network LAN 
interface; and 

a second connector carried by said second housing 
and being removably mateable with said first connector of 
said cryptographic module. 
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16. The cryptographic device of Claim 12 wherein 
said cryptographic processor comprises: 

an unencrypted data buffer circuit coupled to said 
host network processor; 

a cryptography circuit coupled to said unencrypted 
data buffer circuit; and 

an encrypted data buffer circuit coupled to said 
cryptography circuit . 

17. The cryptographic device of Claim 12 wherein 
said communications module comprises a predetermined one 
from among a plurality of interchangeable communications 
modules each for communicating over a different 
communications media. 

18. The cryptographic device of Claim 12 wherein 
said network LAN interface comprises at least one of a . 
wireless LAN (WLAN) communication circuit, a wireline LAN 
communication circuit, and a fiber optic LAN communication 
circuit . 

19. The cryptographic device of Claim 12 wherein 
said user LAN interface comprises an Ethernet interface. 

20. The cryptographic device of Claim 12 wherein 
said cryptographic module further comprises a tamper circuit 
for disabling said cryptographic processor based upon 
tampering with said first housing. 

21. A communications method comprising: 
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coupling a cryptographic module to a network 
device, the cryptographic module comprising a user network 
interface, a host network processor coupled to the user 
network interface, and a cryptographic processor coupled to 
the host network processor; 

providing a communications module comprising a 
network communications interface coupled to the 
cryptographic processor; 

causing the host processor to generate 
cryptographic processor command packets for the 
cryptographic processor each comprising an address portion 
and a data portion, and to encapsulate command packets for 
the communications module in the data portions of the 
cryptographic processor command packets; and 

causing the cryptographic processor to pass the 
communications module command packets to the communications 
module without performing cryptographic processing thereon. 

22. The method of Claim 21 further comprising 
causing the host network processor to format the data 
portions based upon the simple network management protocol 
(SNMP) . 

23. The method of Claim 21 wherein the 
communications module command packets comprise Ethernet 
packets . 

24. The method of Claim 21 wherein the 
cryptographic processor command packets comprise Internet 
protocol (IP) packets. 
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25. The method of Claim 21 wherein the user 
network interface comprises an Ethernet Local Area Network 
(LAN) interface, and wherein the network communications 
interface comprises a network LAN interface. 

26. A communications system comprising: 

a plurality of network devices coupled together to 
define a network, and a cryptographic device coupled to at 
least one of said network devices; 

said cryptographic device comprising a 
cryptographic module coupled to said at least one network 
device, and a communications module coupled to said 
cryptographic module; 

said cryptographic module comprising a user 
network interface, a host network processor coupled to said 
user network interface, and a cryptographic processor 
coupled to said host network processor; 

said communications module comprising a network 
communications interface coupled to said cryptographic 
processor; 

said host processor generating cryptographic 
processor command packets for said cryptographic processor 
each comprising an address portion and a data portion, and 
encapsulating command packets for said communications module 
in the data portions of said cryptographic processor command 
packets; 

said cryptographic processor passing the 
communications module command packets to said communications 
module without performing cryptographic processing thereon, 
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27. The system of Claim 26 wherein said host 
network processor formats the data portions based upon the 
simple network management protocol (SNMP) . 

28. The system of Claim 26 wherein the 
communications module command packets comprise Ethernet 
packets, and wherein the cryptographic processor command 
packets comprise Internet protocol (IP) packets. 

29. The system of Claim 26 wherein said 
cryptographic module further comprises: 

a first housing carrying said user network 
interface, said host network processor, and said 
cryptographic processor; and 

a first connector carried by said first housing 
and coupled to said cryptographic processor. 

30. The system of Claim 29 wherein said 
communications module further comprises: 

a second housing carrying said network 
communications interface; and 

a second connector carried by said second housing 
and being removably mateable with said first connector of 
said cryptographic module. 

31. The system of Claim 26 wherein said 
cryptographic processor comprises: 

an unencrypted data buffer circuit coupled to said 
host network processor; 

a cryptography circuit coupled to said unencrypted 
data buffer circuit; and 
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an encrypted data buffer circuit coupled to said 
cryptography circuit. 

32. The system of Claim 26 wherein said 
communications module comprises a predetermined one from 
among a plurality of interchangeable communications modules 
each for communicating over a different communications 
media . 

33. The system of Claim 26 wherein said network 
communications interface comprises at least one of a 
wireless LAN (WLAN) communication circuit, a wireline 
communication circuit, and a fiber optic communication 
circuit . 

34. The system of Claim 26 wherein said user 
network interface comprises an Ethernet Local Area Network 
(LAN) interface, and wherein said network communications 
interface comprises a network LAN interface. 

35. The system of Claim 26 wherein said 
cryptographic module further comprises a tamper circuit for 
disabling said cryptographic processor based upon tampering 
with said first housing. 
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